[Day 7] 4. LAB 2 Setting Up a VPN on Windows Server

Goal:
Establish a VPN on a Windows Server to allow a client machine (on VMNET4) to connect to another network (VMNET5) and acquire an IP in the VMNET5 range.

Setup Requirements

Networks:
- LAN: 50 network (VMNET5)
- WAN: 40 network (VMNET4)
Machines:
- Windows Server
- Debian (LAN-side)
- Windows Client (WAN-side)

Steps

1. Configure VPN on Windows Server

Open the Windows Server VM.
Add Remote Access Role:
- Go to Server Manager → Add Roles and Features.
- Select Remote Access → Next → VPN (Routing and Remote Access Service).
- Click Add Features → Install.
Set Up Routing and Remote Access:
- Open Tools → Routing and Remote Access (RRAS).
- The RRAS server will show a red icon.
- Right-click it and select Configure and Enable Routing and Remote Access.
- Choose Custom Configuration → Check VPN Access → Finish.
- Start the service (icon will turn green).
Assign an IP Range for VPN Clients:
- Right-click the green RRAS server icon → Properties → IPv4 → Settings.
- Provide an IP range within the LAN network (e.g.,
```
192.168.50.51
```
  to
```
192.168.50.55
```
  ).

2. Create a User for VPN Access

Open Computer Management → Users.
Create a new user:
- Name: Tinku.
- Uncheck all options except Password Never Expires.
Configure Dial-In Access:
- Right-click user Tinku → Properties → Dial-In tab.
- Set Network Access Permission to Allow Access.

3. Configure VPN on the Client Machine (Windows)

On the Windows Client VM:
- Go to Settings → Network & Internet → VPN → Add a VPN Connection.
Enter the details:
- VPN Provider: Windows (built-in).
- Connection Name: Tinku's VPN.
- Server Name or Address: 192.168.40.10. (WAN IP that you have on Windows Server)
- VPN Type: PPTP (Point-to-Point Tunneling Protocol).
- Credentials: Enter Tinku's username and password.
Open Run (
```
Windows + R
```
) → Enter
```
ncpa.cpl
```
→ Check the list of network connections.
- If Tinku's VPN is not visible, manually connect via VPN settings.

4. Verify VPN Connection

Connect to Tinku's VPN on the client machine. (from Network & Internet option)
Verify the client acquires an IP address in the VMNET5 range (
```
192.168.50.x
```
).
Try pinging to the Debian Machine.

Outcome:
The VPN connection is successfully established, allowing the client (Windows machine on VMNET4) to communicate with the LAN network (VMNET5) and obtain an IP address within the LAN range.